Yeah that's definitely fair, I have the same concern. Currently I've reduced my extensions to just a few that I either trust (like gorhill's) or that I wrote myself. But I think it would be huge if Mozilla built out the tooling needed to keep a better monitor on them. It's an extremely hard problem to be sure though.